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DETAILED ACTION 

1. Claims 1-32 are pending. 

Information Disclosure Statement 

2. The information disclosure statements (IDS) submitted on 7/18/05, 2127104, 
1 1/17/03, 7/31/03 are being considered by the examiner. 

■i 

Qlaim Rejections - 35 USC § 102 

3. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

4. Claims 1-32 are rejected under 35 U.S.C. 102(b) as being anticipated by 
Yamada et al, U.S. Patent No. 6,144,743. 

Regarding claim 1, Yamada discloses a security container/recording unit (HDD) (fig. 1, 
#29 and fig. 2, #29), that secures a document component by encapsulating, within the 
security container, the document component/encrypted information (fig. 2, #40), 
conditional logic for controlling operations on the document component/control 
information (fig. 2, #42), and key distribution information usable for controlling access to 
the document component/encrypted key information (fig. 2, #41). 
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Regarding claim 2, Yamada discloses the security container according to Claim 1 , 
wherein the security container secures a portion of a higher-level document (col. 7, lines 
40-45). 

Regarding claim 3, Yamada discloses the security container according to claim 2, 
wherein the higher-level document has more than one portion secured by security 
containers (fig. 10). 

Regarding claim 4, Yamada discloses a method of securing document content using 
security containers/recording unit (HDD) (fig. 1, #29 and fig. 2, #29), comprising the step 
of encapsulating, within a security container, a document component/encrypted 
information (fig. 2, #40), conditional logic for controlling operations on the document 
component/control information (fig. 2, #42), and key distribution information usable for 
controlling access to the document component/encrypted key information (fig. 2, #41). 

Regarding claim 5, Yamada discloses the method according to claim 4, wherein the key 
distribution information further comprises an identification of one or more users and/or 
processes that are authorized to access the document component/user specifying 

information (fig. 3, #53). 

♦ 

Regarding claim 6, Yamada discloses the method according to claim 5, wherein the key 
distribution information further comprises a symmetric key that encrypted both the 
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document component and the conditional logic that are encapsulated within the security 
container, wherein the symmetric key is stored in an encrypted form for decryption by 
the authorized users and/or processes (col. 9, lines 10-17): 

Regarding claim 7, Yamada discloses the method according to claim 6, wherein the 
encrypted form of the symmetric key comprises a separate version of the key for each 
distinct user, process, group of users, or group of processes, wherein the separate 
version has been encrypted with a public key associated with the corresponding distinct 
user, process, group of users, or group of processes (col. 16, lines 25-34). 

Regarding claim 8, Yamada discloses the method according to claim 5, wherein the 
authorized users and/or the authorized processes are specified individually or as groups 
(fig. 3, #50)*. 

Regarding claim 9. The method according to claim 4, wherein the conditional logic 
further controls access to the document component (col. 7, lines 51-57). 

Regarding claim 10, Yamada discloses the method according to claim 9, wherein the 
key distribution information further controls access to the conditional logic (fig. 2, #41). 

Regarding claim 11, Yamada discloses the method according to claim 4, wherein the 
document component and the conditional logic are encrypted before encapsulation 
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within the security container (fig. 2, #40 & 41). 

Regarding claim 12, Yamada discloses the method according to claim 4, wherein the 
security container is encoded in structured document format (col. 7, lines 32-36). 

Regarding claim 13, Yamada discloses the method according to claim 12, wherein the 
structured document format is Extensible Markup Language ("XML") format (col. 7, lines 
32-36). 

Regarding claim 14, Yamada discloses the method according to claim 5, wherein the 
identification of the one or more users and/or processes comprises an identification of at 
least one group, the group having as members one or more of the users and/or 
processes (fig. 13, #ST38). 

Regarding claim 15, Yamada discloses the method according to claim 14, wherein the 
members are determined dynamically, upon receiving a request to access to the 
document component (fig. 13, #ST38). 

Regarding claim 16, Yamada discloses the method according to claim 15, wherein the 
dynamic determination further comprises accessing a repository where the members of 
the group are identified (fig. 13, #ST38, and EEPROM, fig. 6, #23). 
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Regarding claim 17, Yamada discloses the method according to claim 4, further 
comprising the steps of: receiving, from a requester, a request to access the document 
component (fig. 13, #ST32); programmatically determining, using the key distribution 
information, whether the requester is authorized to access the document component 
(fig. 13, #ST43); and programmatically evaluating, using the conditional logic whether 
the request can be granted (fig. 13, #ST44), when the programmatically determining 
step has a positive result (fig 13, #ST45), and rejecting the request when the 
programmatically determining step has a negative result (fig. 13, #ST40). 

Regarding claim 18, Yamada discloses the method according to claim 17, wherein the 
conditional logic evaluates at least one of: an identity of the requester; a device used by 
the requester; a context of the requester; a zone of an application used by the 
requester; a user profile of the requester; and a target destination of the request (fig. 13, 
#ST35-ST38). 

< 

Regarding claim 19, Yamada discloses a computer program product for securing 
document content using security containers, the computer program product embodied 
on one or more computer-readable media and comprising: computer-readable program 
code means for receiving, from a requester, a request to access document content (fig. 
13, #S32), wherein the document content/encrypted information (fig. 2, #40) is 
encapsulated as a document component within a security container/recording unit (fig. 
2, #29) along with conditional logic/control information (fig. 2, #42) for controlling 
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operations on the document component and key distribution information/encrypted key 
information (fig. 2, #29) usable for controlling access to the document component (col. 
7, lines 51-57); computer-readable program code means for programmatically 
determining, using the key distribution information, whether the requester is authorized 

■ t 

to access the document component (fig. 13, #ST38); and computer-readable program 
code means for programmatically evaluating, using the conditional logic, whether the 
request can be granted, when operation of the computer-readable program code means 
for programmatically determining yields a positive result (fig. 13, #ST45), and for 
rejecting the request when operation of the computer-readable program code means for 
programmatically determining yields a negative result (fig. 13, #ST40). 

Regarding claim 20, Yamada discloses a system for securing document content using 
security containers, comprising: a security container (fig. 2, #29) that encapsulates a 
document component/encrypted information (fig. 2, #40 and fig. 10), conditional 
logic/control information (fig. 2, #42) for controlling operations on the document 
component, and key distribution information/encrypted key information (fig. 2, #41) 
usable for controlling access to the document component (col. 7, lines 51-57); means 
for receiving, from a requester, a request to access the document component (fig. 13, 
#ST32); means for programmatically determining, using the key distribution information, 
whether the requester is authorized to access the document component (fig. 13, 
#ST38); and means for programmatically evaluating, using the conditional logic, 
whether the request can be granted, when operation of the means for programmatically 
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determining yields a positive result (fig. 13, #ST44-ST45), and for rejecting the request 
when operation of the means for programmatically determining yields a negative result 
(fig. 13,#ST40). ■ _ 

Regarding claim 21, Yamada discloses the system according to claim 20, wherein the 
security container is embedded within a document (fig. 10). 

Regarding claim 22, Yamada discloses the system according to claim 20, wherein the 
security container encapsulates the document component on a system clipboard (fig. 1 , 
#29). 

Regarding claim 23, Yamada discloses the system according to claim 20, wherein the 
security container is placed on a user interface (fig. 6, #29). 

Regarding claim 24, Yamada discloses the system according to claim 20, wherein the 
security container encapsulates the document component for exchange using 
interprocess communications (col. 10, lines 3-21). 

Regarding claim 25, Yamada discloses the system according to claim 20, wherein the 
security container encapsulates the document component for exchange using a 
messaging system (fig. 18). 
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Regarding claim 26; Yamada discloses the system according to claim 20, further 
comprising means for copying the document component to a target destination, wherein 
the means for copying copies the entire security container in order to copy the 
document component (fig. 14, #ST56). 

Regarding claim 27, Yamada discloses a method of securing document content using 
security containers, comprising steps of: receiving, from a requester, a request to 
access document content (fig. 13, #ST32), wherein the document content is 
encapsulated as a document component/encrypted content (fig. 2, #40) within a security 
container (fig. 2, #29) along with conditional logic for controlling operations on the 
document component (fig. 2, #42) and key distribution information usable for controlling 
access to the document component (fig. 2, #41); programmatically determining, using 
the key distribution information, whether the requester is authorized to access the 
document component; programmatically evaluating, using the conditional logic, whether 
the request can be granted, when the programmatically determining step has a positive 
result (fig. 13, #ST45), and for rejecting the request when the programmatically 
determining step has a negative result (fig. 13, #ST40); and charging a fee for carrying 
out one of more of the receiving, programmatically determining, and programmatically 
evaluating steps (col. 14, lines 26-29). 

Regarding claim 28, Yamada discloses a method of securing document content using 
security containers, comprising steps of: receiving, from a requester, a request to 
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access document content (fig. 13, #ST32), wherein the document content is 
encapsulated as a document component/encrypted content (fig. 2, #40) within a security 
container (fig. 2, #29) along with conditional logic for controlling operations on the 
document component (fig. 2, #42) and key distribution information usable for controlling 
access to the document component (fig. 2, #41); programmatically determining, using 
the key distribution information, whether the requester is authorized to access the 
document component; programmatically evaluating, using the conditional logic, whether 
the request can be granted, when the programmatically determining step has a positive 
result (fig. 13, #ST45), and for rejecting the request when the programmatically 
determining step has a negative result (fig. 13, #ST40); and charging a fee for carrying 
out one of more of the receiving, programmatically determining, and programmatically 
evaluating steps (col. 14, lines 26-29). 

Regarding claim 29; Yamada discloses the method according to Claim 5, further 
comprising the steps of: sending the security container to one or more recipients (fig. 
13, #ST43); and upon receipt at each of the recipients, using the conditional logic to 
determine whether that recipient can access the document component encapsulated 
within the security container (fig. 13, #ST44). 

Regarding claim 30, Yamada discloses the method according to Claim 5, further 
comprising the steps of: receiving, at a recipient, the security container; and using the 
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conditional logic to determine whether the recipient can access the document 
component encapsulated within the security container (fig. 13, #ST44). 

Regarding claim 31, Yamada discloses the method according to Claim 5, further 
comprising the steps of: receiving, at a plurality of recipients, the security container; and 
using the conditional logic, at one or more of the recipients, to determine whether that 
recipient can access the document component encapsulated within the security 
container (fig. 13, #ST44). 

Regarding claim 32, Yamada discloses the method according to Claim 4, wherein the 
security container encapsulates the document component for transfer to a plurality of 
members of a group, and wherein each member of the group to which the transfer is 
made uses the conditional logic for determining whether that member is authorized to 
access the document component (fig. 13, #ST44). 

Conclusion 

5. Any inquiry concerning this communication or earlier communications from the 

■i. 

examiner should be directed to Aubrey H. Wyszynski whose telephone number is 
(571)272-8155. The examiner can normally be reached on Monday - Thursday, and 
alternate Friday's. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on (571)272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-91 99 (IN USA OR CANADA) or 571-272-1 000. 



AHW 



GILBERTO BARRON 3*~ 
SUPERVISORY PATENT EXAMINER 
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